CVE-2017-4967

CVE-2017-4967 : RabbitMQ and RabbitMQ for PCF have multiple forms in the management UI vulnerable to XSS across 3.4.x, 3.5.x, and 3.6.x prior to 3.6.9 (and related PCF versions). The root cause is unsanitized input in management UI forms, enabling cross-site scripting. Impact is limited to the ma...

CVE-2017-4959

Technical details about CVE-2017-4959 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-4959

An issue was discovered in Pivotal PCF Elastic Runtime 1.8.x versions prior to 1.8.29 and 1.9.x versions prior to 1.9.7. Pivotal Cloud Foundry deployments using the Pivotal Account application are vulnerable to a flaw which allows an authorized user to take over the account of another user, causi...

CVE-2017-4975

An issue was discovered in Pivotal PCF Tile Generator versions prior to 6.0.0. Tiles created by the PCF Tile Generator create a running open security group that overrides security groups set by the operator...

CVE-2017-4966

CVE-2017-4966 affects RabbitMQ server and RabbitMQ for PCF. The vulnerability is in the RabbitMQ management UI , which stores signed-in user credentials in the browser’s localStorage with no expiration, enabling retrieval via a chained attack. Affected versions include all 3.4.x, all 3.5.x, and 3...

CVE-2017-4965

CVE-2017-4965: Several forms in the RabbitMQ management UI are vulnerable to XSS in affected releases (RabbitMQ: 3.4.x, 3.5.x, 3.6.x before 3.6.9; RabbitMQ for PCF: 1.5.x, 1.6.x before 1.6.18, 1.7.x before 1.7.15). Debian DLA-2710 lists this alongside CVEs 4966/4967 with a fix for 3.6.6-1+deb9u1;...

CVE-2017-4955

Technical details about CVE-2017-4955 are not provided across the connected documents. The description notes credentials in logs for the PCF Elastic Runtime Notifications errand. Monitor for updates in public advisories.

CVE-2017-4955

An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.65, 1.7.x versions prior to 1.7.48, 1.8.x versions prior to 1.8.28, and 1.9.x versions prior to 1.9.5. Several credentials were present in the logs for the Notifications errand in the PCF Elastic Runtime tile...

CVE-2017-4975

P CVE-2017-4975 affects Pivotal PCF Tile Generator (versions

CVE-2017-4966

An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. RabbitMQ management UI stores signed-...

CVE-2017-4965

An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ...

PT-2017-4083 · Pivotal +1 · Rabbitmq +1

Name of the Vulnerable Software and Affected Versions: RabbitMQ versions 3.4.x through 3.5.x and 3.6.x prior to 3.6.9 RabbitMQ for PCF versions 1.5.x and 1.6.x prior to 1.6.18 and 1.7.x prior to 1.7.15 Description: The issue is related to insufficient protection measures in the RabbitMQ managemen...

Pivotal RabbitMQ Product Cross-Site Scripting Vulnerability

Pivotal RabbitMQ and RabbitMQ for PCF are both products of the American company Pivotal Software. The former is a set of open source message broker software that implements the Advanced Message Queuing Protocol AMQP, and the latter is an open source messaging server used to support data monitorin...

CVE-2017-4965

An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ...

CVE-2017-4967

An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ...

CVE-2016-4468

CVE-2016-4468 describes a SQL injection vulnerability in Cloud Foundry components (PCF before v238; UAA 2.x before 2.7.4.4, 3.x before 3.3.0.2, and 3.4.x before 3.4.1; UAA BOSH before 11.2 and 12.x before 12.2; Elastic Runtime before 1.6.29 and 1.7.x before 1.7.7; Ops Manager 1.7.x before 1.7.8) ...

Pivotal GemFire for PCF Remote Privilege Elevation Vulnerability

Pivotal Software GemFire for PCF is a high-performance, scalable, in-memory distributed database for PCF from Pivotal Software, USA. A remote elevation of privilege vulnerability exists in Pivotal Software GemFire for PCF version 1.6.x prior to 1.6.5 and version 1.7.x prior to 1.7.1. A remote...

CVE-2016-9885

The CVE-2016-9885 issue affects Pivotal GemFire for PCF (1.6.x < 1.6.5 and 1.7.x

CVE-2016-9885

An issue was discovered in Pivotal GemFire for PCF 1.6.x versions prior to 1.6.5 and 1.7.x versions prior to 1.7.1. The gfsh Geode Shell endpoint, used by operators and application developers to connect to their cluster, is unauthenticated and publicly accessible. Because HTTPS communications are...

CVE-2016-9877

An issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12, and 1.7.x before 1.7.7. MQTT MQ Telemetry Transport connection authentication with a username/password pair succeeds if an existing username is provid...